the system administrator has set policies to prevent this installation

hi i am getting ready to upgrade my win 2003 domain to a win 2008 domain but have one issue i cannot seem to resolve.

i am running a 'ris server' with multiple xp images ok.

i have also now created an image via 'risetup.exe' onto my ris server just like i did with with 1st xp flat image.

the issue i have is that i 'pre-staged' a machine by adding the 'hostname & mac address' via my master dc aduc.

i then successfully received my win 2003 image installed onto my secondary domain member server.

when i logged on, it only allowed me to logon to the domain and 'no local user account was created' which was expected.

i then attempted to install sp2 but this would not install showing the below:

"you do not have permission to update win server 2003"

i decided to create a local 'admin' account and then logged on locally & installed sp2 successfully

i then logged onto the secondary domain member server and attempted to install 'isa 2006', but it prompts a message:

" is that after installing 'win 2003' image onto another server"

note:  as i am not using 3rd party software there was no requirement to use: sysprep in order to select 'generalize' - as advised previously.

so have used 'riprep.exe' for my xp.

question 1.  does anyone know if there is a way to resolve this as i have tried 'delegation, batch job, service, via my gpo and that appears not to resolve my issue  ?

possible resolution:

it maybe the proper way but i am not sure, so i was thinking about 'not pre-staging' my win 2003 domain member server and just installing and adding a new name later, to see if that rectifies my problem - but i have not tried that yet  ?
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Jason WatkinsIT Project LeaderCommented:
What is the benefit of pre-staging? Are you trying to automate the process of naming the host after RIS images it? I would add server to the domain manually.

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
mikey250Author Commented:
hi i realise my main thread did not show the exact message:

note: i am aware i could have used the 'setup manager' to do the below but thought i would try the below:

i just assumed that if i wish to take control of machines i thought 'pre-staging' was one method of doing things but did not realise the issue i would have via domain admin account installing sp2 and did not realise the issue via the domain admin account when installing isa 2006 receiving the below message:

"the system administrator has set policies to prevent this installation"

i would like to know if the above can be put right, unless there was a specific 'update' to fix those issues above.

as a way round i have i have now removed the server from the domain although i had to logon locally to do that as when logged onto the domain, it would not allow me to do that due to it also being dimmed out.

so i have now rebooted the server and just completed a new image install without using the 'pre-staged' functionality and i have also attempted to install isa 2006 which all appears ok.  so i am now continuing to install sp2 before i do install isa 2006.
Jason WatkinsIT Project LeaderCommented:
Pre-staging is good, that's what we do where I work. The error looks like a GPO result from a software restriction policy more than anything.
CompTIA Security+

Learn the essential functions of CompTIA Security+, which establishes the core knowledge required of any cybersecurity role and leads professionals into intermediate-level cybersecurity jobs.

mikey250Author Commented:
hi i only installed via ris image win 2003 & attempted to install 'win 2003 sp2 manually & then isa 2006 manually & not via gpo\computer config\software installation\ for isa 2006.

if 'pre-staging' is good, what do i do to resolve the issue i have  ?
Jason WatkinsIT Project LeaderCommented:
Is there a domain user account that RIS uses to set up the image? (Pardon me. It has been a while since I've worked with RIS). Try doing the install under that account. Also, does the install process place the server in any OU that might have a restrictive GPO applied?
mikey250Author Commented:
currently i am only using 'administrator domain' account for everything & yes my 'isa 2006 firewall' is in an 'ou/gpo' for 'windows updates' etc via gpo\computer config & user config - only, so everything is syncing.
Jason WatkinsIT Project LeaderCommented:
I'd take the ISA server out of its final OU for updating, install SP2, then put it back. See if that works.
mikey250Author Commented:
what i have been doing is installing image successfully, which locates by default the computer in the computer container via aduc and then logging on master dc 'aduc' and 'moving' isa 2006 to 'ou'

so are you saying install image & sp2 in aduc computer container & then 'move' to 'ou' & install 'isa' manually as usual  ?
Jason WatkinsIT Project LeaderCommented:
mikey250Author Commented:
ok, i might give that ago tomorrow because as i mentioned earlier i have currently 'deleted' the 'pre-staging' and installed image without 'pre-staging' so once i have confirmed i can install 'isa' as expected i will 'pre-stage' again and take your advice as it is good to know.

if it fails, any other suggestions, or maybe i should install, image & sp2 & isa in the aduc computer container 1st then 'move' to specific 'ou'  ?
Jason WatkinsIT Project LeaderCommented:
How often do you install Windows Server? RIS is a convenient solution for deploying multiple client operating systems, am unsure if it is applicable to servers. I've always ever installed servers manually as they have all wound-up being different. Installing into the default 'Computers' folder is fine as it only inherits the domain GPO there and isn't subject to the specialized GPO's one may encounter in sub-OU's.
mikey250Author Commented:
yes i realise ris is a convenient solution for deploying client os, but just wanted to know how to do it and then that was the end of the task as i already have all my xp images located on my ris server.

once done i can eventually upgrade to wds and move master dc to win 2008.

appreciated for that advice and will let you know sometime tomorrow.
mikey250Author Commented:
thanks for the advice.
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Windows Server 2008

From novice to tech pro — start learning today.